Windows Defender is built-in and is good enough IMHO. But AFAIK you can still install something else on top, if you don't trust Microsoft.